XSS prevention and controllers template fix